Privacy Policy of MyLinks

Last updated: 16/10/2026

MyLinks is a free and open-source bookmark manager that you can host yourself. This page explains what this instance stores about you, who can see it, how long it is kept and how to get rid of it. The administrator of this instance is the data controller and your contact for any request.

What we store about you

1.1 Your account

Your email address, your name or nickname, and the dates your account was created and last updated.
A password hash if you sign in with a password, or your Google identifier if you sign in with Google. Your password is never stored in clear.
The last time you were seen, updated at most every 5 minutes.

1.2 Your content

Your collections (name, description, icon, visibility) and the links they contain (address, name, description).
Your favorites and the collections you follow.
For each link, a click counter and the time of the last click. No IP address, browser or referrer is recorded with a click, and there is no per-visit record. Only you see these totals.

1.3 Security records

Sessions, with the IP address and browser of each sign-in. You can see and revoke them on your sessions page. They expire after 7 days.
An authentication journal (sign-ins, refusals, password and address changes, linked providers) with your IP address and browser. They are erased after 180 days. The event itself (type, account, time) is kept as security evidence.
An activity journal of what you did (creating, editing or deleting collections and links, following, importing, exporting, deletion requests), with your IP address. It records identifiers and counts, never the content. Entries are deleted after 90 days.
Short-lived tokens for email confirmation, password reset and address change, removed a day after they expire or are used. Rate limiting counters are transient.

1.4 Cookies

MyLinks only uses the cookies required to keep you signed in and to protect your session. There are no advertising or tracking cookies.

Who can see it

Private collections are visible to you only.
Public and shared collections show their name, description, icon and links, your display name and the number of followers to anyone who has access, including through the API. Your email, favorites, click counts and other collections are never exposed.
Administrators see your email, how you sign in, how many collections and links you have and when you were last active. They see the journals with IP addresses partly masked. They never see your links, addresses, collection names or searches.

Third parties

There is no analytics, no error tracking and no advertising. The server makes only a few outbound requests: it fetches the favicon of the website of each link you save, from the root address of that site only (never the full address), without any third-party favicon service; it contacts Google if you sign in with Google; and it sends emails through the mail server configured by the administrator.

Favicons are stored without any link to you and are removed once no link uses that website any more. Your browser loads them through this instance only. Links to other websites do not send a referrer.

Browser extension

If you use the browser extension, it syncs your collections only while you are connected. It sends a link only when you save it, and reports visits to saved links opened from the extension. If you turn on the optional bookmark mirror, it uploads the bookmarks you save afterwards to your bookmarks bar and those you add to collection folders. It talks to this instance only and has no third-party service.

Your rights and deletion

You can export your data from your settings at any time. When you request deletion, your account has a 30-day grace period during which you can change your mind. An account unused for 365 days, or one an administrator deletes, goes through the same grace period. Afterwards your account and everything you own are permanently deleted. The only thing that remains is the authentication journal events, detached from any account and stripped of IP address and browser after 180 days.

Public collections of an account pending deletion are hidden during the grace period. For any other request about your data, contact the administrator of this instance.

MyLinks is built to comply with the General Data Protection Regulation (GDPR) of the European Union.